SentinelOne Wayfinder Threat Detection and Response Reviews

We are using SentinelOne Wayfinder Threat Detection and Response ourselves.

Valuable features in SentinelOne Wayfinder Threat Detection and Response are satisfactory, and compared to other solutions, we feel this is appropriate for our current needs.

Using SentinelOne Wayfinder Threat Detection and Response has contributed to our team's focus on strategic initiatives as we are focusing more on deep visibility plus the threats on the endpoint and the device controller, which are all things we are monitoring.

We have been working in this field with SentinelOne Wayfinder Threat Detection and Response for the last two years.

Overall, the product has been stable.

I think their technical support has some problems with scanning on the Linux machine, but other than that, everything is fine.

I would rate their technical support as adequate, but the problem is they are indicating there is some back-end bug that has not been fixed yet; they are checking, but they are not fixing the problem.

The initial setup for SentinelOne Wayfinder Threat Detection and Response was straightforward.

We completed the setup with the help of a reseller.

My impression of the annotation and insights provided by SentinelOne Wayfinder Threat Detection and Response analysts on detected threats is that detection will happen based on whatever the engine is, but I am not certain about the specifics.

The integration process of SentinelOne Wayfinder Threat Detection and Response with our other security products was straightforward, and they helped us with queries for some policies.

We integrated SentinelOne Wayfinder Threat Detection and Response with log forwarding, some internal tools, and applications.

Speaking about the use cases for SentinelOne Vigilance, people are usually using these products for protecting their PCs to have a clean environment.

From my reseller and partner perspective, the best features in the products are easy deployment, really small size installation, and an update process. It is a Gartner leader, so there is a lot of innovation in it.

Regarding real-time monitoring features, it is absolutely accurate and automatically handled in most cases if configured correctly.

I am actually able to synthesize machine learning with human experience to manage complex threats in IRs. This is included as part of the back-office strategy that they run through an AI process.

I assess the importance of having 24/7 security coverage provided by SentinelOne Vigilance to be highly needed.

As a customer, I have seen benefits from using it, and I can assure that it is 100% protected against many threats, and it is always in the actual state.

I have observed improvements in Incident Response speeds since integrating SentinelOne Vigilance, as there are far more incidents automatically detected and cleared than before.

Regarding disadvantages of SentinelOne Vigilance, there is no local hub server that I can use to download the updates and signatures only once.

The solution is fully scalable, although the only point for scalability is that if there was local hub support, I could save some data transmission, but otherwise, it is fully capable.

Currently, the lack of a local hub is the only concern that I have faced. I do not have any other issues with the product.

I have been dealing with SentinelOne Vigilance for about a year now. We started testing approximately a year ago.

I find it absolutely stable. I do not have any issues there, and we had it on other systems before, but not on that one.

I would rate the actual technical support from SentinelOne Vigilance a nine.

Positive

In comparison to SentinelOne Vigilance, I was also dealing with Kaspersky.

The deployment is quite easy. If I have the right deployment tools, it is absolutely easy and self-handled.

I have seen some ROI, and my clients are fully satisfied compared with others, especially as it is a subscription on a monthly range, so I can adapt it to my users at any time.

For the overall return on investment, both time and money, I would say it is a full 20.

The pricing, licensing, and setup costs in general are quite affordable.

I am dealing with the complete suite, including the full package of SentinelOne Vigilance, Singularity Identity, and similar products.

The products I mentioned for MDR, for example, ITDR, such as Vigilance, Singularity Identity, I am also dealing with them to some extent.

I am a customer and an integrator partner. I do reselling as through my own direct clients that I support, not on the broad markets.

The specific reason for using it is because of all the handling and the automatic process. There is a lot of automatization, and if configured correctly, you do not need to care about that function.

I would rate SentinelOne Vigilance a nine out of ten.

I am both a reseller and integrator for the products, and my email is becker@medatech.de. I am the managing director.

I can confirm that if SentinelOne Vigilance has any questions or comments regarding my review, they can reach me via email to clarify something. I am interested in being a reference for this vendor.

The solution helps to protect our laptops and servers. 

We use a third-party tool linked to SentinelOne Vigilance for endpoint detection and response, which a cybersecurity center manages. The tool allows them to monitor all activity and control settings for us.

The best feature of this solution is the third-party management aspect. An external company oversees the tool's management and monitors the data it generates. If the EDR detects suspicious activity, it will react accordingly and take necessary actions, such as blocking a device.

After experiencing a breach in 2020 where our data was encrypted by ransomware, we decided to investigate and implement SentinelOne Vigilance. Since then, it has helped keep our business secure.

In security and event management, the tool collects data from all our log files and utilizes AI to detect suspicious activity.

I suspect that the areas for improvement may not necessarily lie within the tool itself but rather in our organization's lack of knowledge and understanding of cybersecurity. Cybersecurity is a complex area, and our organization has a skill set deficit. Therefore, we rely on our cybersecurity support company to help us manage the tool and handle incidents. Our limited expertise sometimes prevents us from fully utilizing them or identifying potential gaps.

I have been working with the product for three years. 

I haven't encountered any issues with the solution's stability. 

You can scale up as the company grows by adding new licenses. It's similar to other platforms like CrowdStrike and Palo Alto, where you can purchase additional licenses as needed when the number of devices or users increases.

We haven't directly contacted SentinelOne Vigilance's technical support. We go through the third party, who works directly with them. We have access to 24/7 support. We're quite satisfied with the level of support we receive. While you could potentially pay for more support, this is true for most products in this category.

The tool's deployment is straightforward and took a few days to complete. 

The tool's pricing is slightly cheaper than other alternatives. It's not just about licensing costs; because we already have it implemented, we can save money on deployment and initial setup. Additionally, SentinelOne Vigilance is slightly cheaper in licensing, maybe around 10-15 percent cheaper.

We did consider other options such as CrowdStrike and Palo Alto EDR. However, after evaluating all options, we found that SentinelOne Vigilance was the most cost-effective solution for us.

I rate the overall product a nine out of ten. 

We are based in India, and we need to have these resources. We use it with smaller teams on security, leveraging expertise from SentinelOne.

The most valuable functions are automated pricing and ensuring the console is clean. 

Additionally, it helps complete RC tasks and get the right information on the right app.

They've been adding a lot of products and technologies to their stack. I honestly don't have any specific improvements to suggest.

I have been using it for two years now.

From a stability perspective, I would rate it a nine or ten out of ten.

In terms of scalability, it's very high. I would give it a rating of nine or ten out of ten.

The support response time is not the issue, however, sometimes, the answers provided are not fully satisfactory due to the nature of the technology and issue complexity.

Positive

The initial setup was quite simple. We did not require any external consultants.

No consultants were required for the setup; our team handled it in-house.

Price could be a factor since, with a lot of add-ons, the cost becomes high.

I've evaluated Vigilance, which is comparable to CrowdStrike.

Overall, I would rate SentinelOne Vigilance a nine out of ten. It has given us peace of mind, and people using SentinelOne are generally satisfied, not switching to other solutions like CrowdStrike.

My company uses SentinelOne Vigilance as an endpoint security for our computers, so all the systems in our firm use SentinelOne to monitor malware.

When SentinelOne Vigilance's users go to websites that may be compromised or get attachments in emails that they click on by mistake, thinking they are legitimate, SentinelOne blocks them. SentinelOne Vigilance will alert both the user and me, the administrator, that some suspicious activity was blocked or quarantined. SentinelOne Vigilance has improved the security of our firm.

The most valuable feature of the solution is that it has a low profile on each machine, so it doesn't take up a lot of resources. The administrative functionality alerts the user and admin team if something has occurred in the systems. SentinelOne Vigilance's portal is easy enough for me to go in and address and get details of those threats.

I am not sure if there are a lot of improvements needed in the solution since my company is very pleased with the solution. SentinelOne Vigilance doesn't actively monitor incoming emails or offer an email plugin for Outlook. It would be fantastic if the solution could actively monitor incoming emails or offer an email plugin for Outlook. I don't say the aforementioned details as a downside of the product, but as an additional feature that might be very useful.

I have been using SentinelOne Vigilance for four years.

Stability-wise, I rate the solution a ten out of ten.

Scalability-wise, I rate the solution a ten out of ten.

I can't remember the last time I had to contact the solution's technical support. I would give the technical support a high rating.

The initial deployment of the solution was very straightforward.

The solution is deployed on the cloud.

I have seen a return on investment with the use of SentinelOne Vigilance in my company.

I rate the product's pricing an eight out of ten since it is really expensive, but it is well worth what my company gets.

SentinelOne Vigilance is a well-grounded solution that has minimal impact on an organization in negative ways and does a great job in the background of protecting our systems.

I rate the overall solution a ten out of ten.

Our company uses the solution instead of a traditional antivirus as an endpoint protector. We have all security alerts passed off to a SOC. 

We are a football club and have 350 users across coaches, medical staff, and ticketing agents. 

The solution is very easy to use. 

The solution should add endpoint clients for mobile and Linux devices because it currently doesn't support them. 

We currently have to use an alternative product for mobile devices but would prefer to use one product for physical PCs, servers, and all mobile devices such as phones and iPads. 

I have been using the solution for two years. 

The solution is stable so stability is rated an eight out of ten.

The only time we had an issue was when two antiviruses were installed on the same machines and they were fighting against each other. 

The solution is scalable and there are multiple aspects to it. 

You can buy different types of licenses that give you more functions or functionality to the product set. Their new product is called Singularity and it includes XDR functionality. 

The scalability is rated an eight out of ten. 

I contacted technical support once and they were quick to respond. Technical support is rated a seven out of ten. 

Neutral

We previously used McAfee but found it to be a bit out of date. It didn't really fit our business requirements anymore. 

The setup is fairly straightforward because the solution is just an agent with a normal installation program. Installing agents on-premises only takes a couple of minutes. After that, you just connect to the cloud. 

We implement the solution in-house. Ongoing maintenance can be completed by one person in IT support. 

We can't really say there is an ROI because we don't have metrics to show that. Other football teams have been breached and we have not so that speaks well for the solution. 

The licensing cost depends on the number of connected devices and whether you purchase any additional services that are offered. 

The solution could be inexpensive for a small business but expensive for a large business because it is priced per device. 

We evaluated the solution, CrowdStrike, and Carbon Black. 

The solution does what it says it will do on the box. It all depends on how deep you want to go or which license you decide to purchase. 

I recommend the solution and rate it an eight out of ten. 

We use the solution in our lab to find out how to deploy it on the full scale later on.

The endpoint security software is great. The XDR has been useful. 

It was easy to set up. 

The performance is good. 

The scalability is excellent. 

It's too early to say what needs improvement. It has been six months and I have two guys working on it at the moment. They need additional time to give me that kind of feedback.

I've been using the solution for about six months. 

The stability is great. It performs well. There are no bugs or glitches, and it doesn't crash or freeze. It is reliable. 

We like how it can scale. That's one of the reasons why we have decided to use the solution from the beginning.

Since we're using it in a lab, in the beginning, we will only have a small number of people using it - maybe around 20. The full scale will be much, much bigger, depending on how we decide to use it in the future.

Since we are going to resell it later, we plan to have it as part of our offering to our end customers. In total, we will have somewhere around 20 people on it. We will have five or more senior technical guys and then 15 people working with the support service desks.

While my team has worked with technical support, I haven't dealt with them directly. I haven't heard of any negative comments. 

We did not previously use a different solution. 

The solution is very easy to set up. It's not complex at all. 

It's a POC. The route for deployment is very easy. 

They were quite slow with the deployment as they would like to learn more about the product when they're doing it. My people spent a few days with it just to make sure that they do everything step by step. Typically, it is a short time needed for the deployment. At the same time, they wanted to do it slowly, just to make sure that they do everything correctly the first time out.

We handled the solution's setup in-house. We were using the setup as a training exercise. 

We have seen that the solution will provide a good ROI. That's not in question. 

The value for money is high. I'd give it three out of four stars. 

We are evaluating it against several different vendors on the market. This, as an endpoint security software, it's excellent.

We are aiming to become a partner and reseller of SentinelOne. 

I have no clue which version we are currently working with. My technical person keeps track of that for me. It should, however, be the latest version. 

We are still working on it, and you can't find a silver bullet solution, however, building your total security with SentinelOne included in your portfolio is a great thing. It covers a lot of what you would like to cover. It's a really good solution.

I'd rate the solution nine out of ten. 

In our company, we use SentinelOne Vigilance for security purposes. We not only use it to detect viruses but also to monitor any activities on the endpoints so that we can take appropriate measures to mitigate any potential threats.

Analytics is the most valuable feature of the solution. In our company, we use it for analytics, and then we use it for sharing certain details with our management, like informing them of the type of vulnerabilities detected by our team.

The price of the solution is very high. So, pricing is an area in the solution that needs improvement. Currently, SentinelOne Vigilance has a competitor named Trellix. Sometimes, SentinelOne Vigilance also detects false positives, which are not true. In such cases, we need to make changes in the policies on the dashboard accordingly.

I have been using SentinelOne Vigilance for three to four years. I am just a customer using the solution.

Stability-wise, I rate the solution a nine out of ten.

Scalability-wise, I rate the solution a nine out of ten.

Regarding the number of users using the solution, I would say that we have deployed the solution across our organization since ours is a shipping company. So, more than a thousand people are using the solution.

The solution's technical support team is good. The environment constantly changes due to the rise in cyber threats. I rate the technical support a nine out of ten. The technical support team will have to improve in a better way to deal with the emerging cyber threats in the market.

Positive

Previously, we were using a signature-based solution named Trend Micro

The initial setup was quite easy. I rate the setup process a nine on a scale where one is difficult, and ten is easy. We have deployed the solution on the cloud. Deploying on-premises can be time-consuming since it must be managed on servers. Also, the deployment process just takes one or two days to activate the service. Then the rest of the deployment takes a week, depending on the organization's size. We always have a team of people involved in deployment for different regions. For example, to deploy in a company in India, we have a team. For the Philippines, there is a separate team. Hong Kong also has a different team.

I rate the solution's pricing a five out of ten since it is a very highly-priced solution.

I would recommend the solution to those planning to use it. I rate the overall solution a nine out of ten.

We rely on SentinelOne to provide protection to our workers, and it is our primary means of protection besides testing. We have been using SentinelOne for some time and decided to use it exclusively with the SOC account advice. We believe SentinelOne is a comprehensive solution for protecting SOAP-based web services and AWS-based cloud infrastructure.

We use it in conjunction with other products to protect other assets, such as the cloud and network.

We had some difficulty integrating it initially, but we found the ability to receive messages and make quick decisions based on the information to be the most useful feature.

The update process has room for improvement because customers may be temporarily without protection during a software update, resulting in issues with stable performance.

I have been using this solution for six years.

Occasionally during an update, customers may temporarily be without protection until the upgrade is complete. We are actively working with another team to resolve this issue. I have a lot of customers. It's not a wonderful situation, but it can happen and customers are without protection for a while.

I would rate the scalability a ten out of ten.

We have deployed SentinelOne on-premises to secure our network, while for about 45% of our requirements, we rely on the cloud.

The license model is good. It costs a little bit more than other antiviruses. But we send the software for review. So the pricing of the products may be less, but it doesn't make sense to start with a solution without trying it.

Overall, I would rate SentinelOne Vigilance a ten out of ten.

SentinelOne Vigilance is being used mostly for endpoint protection, endpoint deployment, and some endpoint management.

Most of our customers are moving away from traditional signature-based antivirus because it's not enough. They're moving to solutions, e.g. SentinelOne Vigilance, that have machine learning included, so that machine learning function adds a tremendous amount of value to our customers, simply because it adds that extra layer of security by providing machine learning and behavior analytics.

Most of the next-generation anti-virus products, including SentinelOne Vigilance, have behavior analytics included, and this is the feature I find most valuable in the solution. Behavior analytics is the direction most of the NGAVs are heading, e.g. if they don't have it, that's where they're going: UBA (user behavior analytics) and UEBA (user and entity behavior analytics).

I also find the machine learning function of this solution valuable, as it provides an extra layer of security for our customers.

Every product has room for improvement. I can't single out anything within SentinelOne Vigilance that would need to be updated or improved, only because I haven't used it in a while.

For the most part, there's no problem with how SentinelOne Vigilance works, but the toughest challenge that customers find is with the deployment and tuning of the product. Getting it tuned properly takes some time, so that's a challenge. You can deploy the product with just about anything, but deployment is always a challenge.

An additional feature I'd like to see across the board, in the next release of SentinelOne Vigilance, is more integration with artificial intelligence. I'd like to see more integration with SIEM and/or SOAR solutions. I'd also like to see better event formatting, so if they can format their events using CEF (common event formatting), that would be fantastic. These are the top three or four additional features I'd like to see.

I'd also like to see predictive analytics. The market isn't there yet, with the exception of Carbon Black, but predictive analytics would be phenomenal. We'll get there in the next five to 10 years, e.g. that market is going to explode here in the next few years.

As we build more artificial intelligence into all these products, including endpoint protection, we're going to be able to predict the type of attack. It's not just malware. It's this type of attack, and they're going to know what it is, but that'll come in time.

I've worked with SentinelOne Vigilance for five years now.

SentinelOne Vigilance and some of the top tier NGAVs are really stable. Now they've all reached the point where most of the customers that we work with trust and like them, and they work out of the box. SentinelOne Vigilance is a stable solution.

We work with everything from the small mom-and-pop stores, all the way up to the enterprise. I don't work with enough of the enterprise customers to understand what they have deployed on the endpoint, e.g. it may be SentinelOne Vigilance, or it may be something else, but scalability feels high if you had to deploy it.

Most of the people have moved away from Kaspersky just because of who they are, and potentially Symantec after the Broadcom acquisition. These people may have moved to SentinelOne Vigilance, or to other AVs. We do see a lot of movement in the endpoint AV customer side, simply because there's a lot to choose from in the market, e.g. this product or other similar products.

Another reason for people switching is that newer technologies are coming out in endpoint protection solutions, e.g. machine learning, artificial intelligence, UEBA, etc. Some customers, especially the smaller shops that are nimble and can move quickly, they might look at a new, sensational technology on endpoint security, and move away from whatever it is they currently have. The larger enterprises are a lot slower to move, so they usually take a lot longer to decide which direction to go, and when they do, they usually sign a three-year contract or more, and they'll stick with it.

The initial setup for SentinelOne Vigilance was straightforward. They made it easy on the front end.

Most of the next-generation antivirus (NGAV) solutions, I have a lot of experience with.

We're using an older version of SentinelOne Vigilance, e.g. we're not using it internally, so we don't have the latest version, but some of our customers who I work with are using it. I'm not sure what version they're using, but it's been a while so they could be using old versions of it.

We're using Microsoft Azure as the cloud provider for this solution.

The deployment of SentinelOne Vigilance was challenging. How long the deployment would take depends on the environment. A small SMB on-premises environment doesn't take long to deploy: You can wrap it up in a GPO package and deploy it. The process is usually straightforward and simple, and it doesn't take long, but when you get into the larger enterprise and you have a hybrid solution and multiple locations, that's when it can become a little sticky.

SentinelOne Vigilance is deployed on the endpoint, so everybody in the organization, no matter which role, is using it. The product is also deployed on IT worker endpoints.

Deployment and maintenance of this solution depends on the size of the organization. There are the smaller SMB customers that we have, e.g. if they're not doing it themselves, they've got a MSP that's deploying it directly, and I'm not sure about the work effort there, but you wrap it up in a package, send it out through a GPO, then it's easy to deploy. You can also use a third-party, e.g. ManageEngine and Quest make great products, so you can deploy SentinelOne Vigilance in any way, but it's going to depend on the size of the organization.

I don't know where this product sits in the market. I know it's in the top 10. I haven't looked recently, but I say this because we have so many vendors. We have 1,600 vendors that we work with here, but I know SentinelOne Vigilance is a top tier AV (antivirus). So as far as our usage goes, when our customers come to us, they're usually looking for something specific with regards to any endpoint security or endpoint protection. If they're not, I don't know how often this product gets recommended because I'm not on the pre-sales or front-end side of that. I'm on the engineering side, so I don't know which products they recommend. I don't know if SentinelOne Vigilance is one of the products where they'll go "Hey, try this one. It's great."

I have no idea about the technical support for this product, as I haven't tried contacting them.

I don't have information about the licensing cost or pricing for this solution, because I'm not on the sales side. I see a lot of people now moving toward Microsoft Defender because they've really done a great job in just the past couple of years, and that's rolled into their E3, E4, or E5 licensing. Sometimes there's cost savings when you bundle Microsoft Defender with other Microsoft products. As for standalone AV on the endpoint, I don't know where SentinelOne Vigilance fits price-wise. People are migrating away from Symantec, SAP, Kaspersky, and some other legacy AVs and moving towards newer AVs, but I don't know if that's because of the costs or not.

The advice I would give to others looking into potentially implementing this product is to always bring it in-house and do a pilot. That's the biggest advice I can give, e.g. you need to test drive a car before you buy it.

I haven't done anything on the ROI side, and that's hard to nail down, but there might be some market data out there on ROI. People don't usually make a change unless they believe there's going to be some improvement.

I don't know where SentinelOne Vigilance is on the market, but I know it's top 10 or top tier, so I'm giving this solution a seven out of ten.